On Jan 25, Bastian Blank <waldi@debian.org> wrote:
> On Mon, Jan 25, 2010 at 12:26:42AM +0000, Marco d'Itri wrote:
> > Actually I meant "vzctl exec" so this is not even close: I need to
> > change the context of a running process.
> Hu? "vzctl exec" does a fork and an exec. Please enlighten me where the
> support you want is actually implemented.
It does, but it does not have to. :-)
It is not documented anywhere and as usual the Parallels developers are
less than helpful, but you can use setluid(2) to associate the caller
with a beancounter and then an IOCTL on /dev/vzctl to move it in a
container.
I used this in libpam_vz, which with some careful planning allows
multiple contexts to share a lot of stuff (with a decent unionfs even
most of the file system).
http://ftp.linux.it/pub/People/md/libpam-vz/
--
ciao,
Marco